openSUSE Factory

Download

factory@lists.opensuse.org

November 2021

77 participants
82 discussions

QtWebkit will be removed from openSUSE Tumbleweed soon
by Christophe Giboudeaux 01 Nov '21

01 Nov '21

Hello, QtWebKit was a rendering engine for web content released with Qt until 5.6. It was replaced with QtWebEngine after that. Despite a community fork in 2016, nothing really happened to keep it alive and secure. Quoting the QtWebKit release page on Github: "WARNING: This release is based on old WebKit revision with known unpatched vulnerabilities. Please use it carefully and avoid visiting untrusted websites and using it for transmission of sensitive data." It's time to drop it from openSUSE Tumbleweed. The good news, most QtWebKit remaining users were just caused by obsolete 'BuildRequires'. Most were cleaned during the week end. Pending SRs: - FreeCAD (SR#902666 replaces the dependency) - qgis (SR#903291 disables the optional dependency) - owncloud-client (it needs an unrelated code fix) - notepadqq (SR#903352 replaces the old version with a git snapshot) Packages that could use snapshots: - quiterss The upstream website looks down. There are 2 github repo (QuiteRSS/quiterss2 and QuiteRSS/quiterss). Both don't have hard dependency on QtWebKit. - leechcraft Last release in 2014. We're already using snapshots. QtWebKit looks optional. The less good news, a couple packages also have to be dropped. KDE packages that will be dropped: - trojita (no activity upstream) - kwebkitpart - kdewebkit Packages with no upstream activity and/or no alternative port: - wkhtmltopdf which is a dependency for python-hide-code and python-pdfkit - swift-im - smtube - goldendict Christophe

12 27

New Tumbleweed snapshot 20211030 released!
by Dominique Leuenberger 01 Nov '21

01 Nov '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bluez (5.61 -> 5.62) freecell-solver (6.2.0 -> 6.6.0) graphviz graphviz-addons kmod kopete libreoffice libxml2 luajit open-iscsi pcsc-lite pipewire (0.3.38 -> 0.3.39) pipewire-media-session (0.3.38 -> 0.4.0) python-SQLAlchemy (1.4.22 -> 1.4.25) selinux-policy sshfs (3.7.1 -> 3.7.2) webkit2gtk3 webkit2gtk3-soup2 yast2-trans (84.87.20210929.6d3a97ea50 -> 84.87.20211022.37a68b8306) === Details === ==== bluez ==== Version update (5.61 -> 5.62) Subpackages: libbluetooth3 - update to version 5.62: * Fix issue with handling truncation when loading LTKs. * Fix issue with accepting Exchange MTU on EATT bearer. * Fix issue with clearing DeviceLost timers on power down. * Fix issue with AVCTP browsing channel and missing ERTM. * Fix issue with AVDTP and local SEID pool for each adapter. * Add support for BR/EDR and LE connection failure reasons. - drop obsoleted patch 0005-media-rename-local-function-conflicting-with-pause-2.patch ==== freecell-solver ==== Version update (6.2.0 -> 6.6.0) Subpackages: freecell-solver-presets libfreecell-solver0 - Update to 6.6.0 * Ignore the FCS_SINGLE_HARD_THREAD and FCS_DISABLE_MULTI_NEXT_INSTS options while removing complexity from the source code. * Better rinutils bootstrap shim. * Silence some compiler warnings. ==== graphviz ==== Subpackages: graphviz-plugins-core libgraphviz6 - Split libgraphviz into tlibcdt, libcgraph, libgvc, libgvpr, libpathplan, libxdot, and liblab_gamut packages, in order to fix shlib naming policy errors (boo#1191756) ==== graphviz-addons ==== Subpackages: graphviz-gd graphviz-gnome - Split libgraphviz into tlibcdt, libcgraph, libgvc, libgvpr, libpathplan, libxdot, and liblab_gamut packages, in order to fix shlib naming policy errors (boo#1191756) ==== kmod ==== Subpackages: kmod-bash-completion libkmod2 - Enable ZSTD on 15.3 as well (boo#1192104). - Only test ZSTD in testsuite on releases where it is available. ==== kopete ==== Subpackages: kopete-lang - Remove the libjingle build dependencies. The build fails for various reasons. ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Fix bsc#1187982: LO-L3: PPTX: one column becomes two within one text frame * bsc1187982.patch ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-tools python38-libxml2 - Rewrite package to the single-spec %python_subpackage_only style and eliminate unnecessary multibuild. ==== luajit ==== - Replace luajit-ppc64-remove-asserts.patch with luajit-ppc64-replace-asserts.patch to use the proper assert functions instead of removing them. - Add luajit-ppc64-remove-asserts.patch: remove calls to lua_assert. Fixes the build with our revision (bsc#1191615). - Add luajit-s390x.patch: add s390x support, based on Fedora's patch and ported to our revision. - Remove ExcludeArch, since package currently builds on s390x. ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Fix the usr-merge changes (bsc#1192013). This includes catching all the places that /sbin was still used directly, as well as making the SPEC file build using /usr/sbin for openSUSE but still use /sbin for SLE, for now. ==== pcsc-lite ==== Subpackages: libpcsclite1 - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_pcscd.service.patch ==== pipewire ==== Version update (0.3.38 -> 0.3.39) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-lang pipewire-modules pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patches from upstream to fix build in s390x: * 0001-map-make-_insert_at-fail-on-a-removed-item.patch * 0002-map-use-uintptr_t-for-the-next-pointer.patch - Use readline-devel instead of pkgconfig(readline) so it can be built in Leap15.3/SLE15-SP3 - Fix %systemd_user_post using the now separated pipewire-media-session.service - Update to version 0.3.39 * Highlights - media-session is now moved into a separate module to speed up its deprecation in favour of WirePlumber. - There is now an LD_PRELOAD v4l2 emulation library to run some existing v4l2 applications on top of PipeWire. - Filter-chains should now flush out remaining samples when paused. There is now also the option to let a filter-chain drain so that long filters such as reverbs can fade out properly. - Stability and compatibility improvements in JACK apps. - Better Bluetooth compatibility with more devices. - libcamera plugin improvements. - Many bugfixes and improvements all over the map. * PipeWire - Fix compilation on ARM. - Log topics are added to most modules. - Documentation updates. Many improvements to the layout. Reorganisation of the modules and groups. - Share a work queue for all links and nodes. This removes the need for a separate eventfd per link and per node. - Catch errors in the map implementation. - Add option to compile without dbus support. - Fix biquad frequency. It was using the wrong sample rate. - Fix a potential crash when destroying nodes, in some cases the node would not be deactivated properly. - Add some more helpers for dealing with properties and their values. - Implement flush and reset on virtual sinks/sources. - Make it possible to let virtual sinks/filter-chains run and drain after being idle. - Fix a bug where the quantum could exceed the maximum because it was scaled with the sample rate. - Fix channel_map parsing in module-zeroconf-discover so that the remote channel map is used. - pw-stream errors emitted on the proxy are reported but not fatal any more. They are usually used by the session manager to signal status to the client but otherwise does not really cause an error on the client. - Links now also store the output and input node id in the global properties so that applications can parse and use them regardless of how the link was made. (#1723) - pw-stream and pw-filter now have an event to notify commands. - The echo-cancel module can now operate on larger quantums. - pw-cat now uses the right metadata to find the default devices in --list-targets. * media-session - Don't try to remix unpositioned streams when linking. This ensures that linking to Pro-Audio nodes does not remix the stream channels but links them as they are, one by one. - media-session is now moved to a separate module to accelerate its deprecation in favour of WirePlumber. * SPA - Many libcamera improvements, handle MemFd buffers, handle errors gracefully. - Small improvements to make interface fall-backs easier to implement. - Add support to enable flush-to-zero and denormals-are-zero to avoid high CPU usage when dealing with denormals. - AUX13 channels are no longer reported as AUX12. (#1727) - Devices with more than 32 channels in Pro-Audio mode now only uses AUX channels. - Improve windowing function of the resampler to reduce aliasing and improve the quality. * JACK - Port connect callbacks will not only be emitted after the port has negotiated buffers, which improves compatibility with applications that try to use the port right after the callback (jack_midi_latency_test). - Fix crash when midi ports were removed and being monitored, like in Ardour. * pulse-server - The pulse tunnel will now use the specified format/rate/channels. - Improve lookup of default source and fall back to the monitors when no sources are available. - Mark some nodes as network nodes so that we can set the NETWORK flag correctly. * GStreamer - The GStreamer element not releases the buffers in the stream again in all cases so that they can be reused by other streams. * v4l2 - Add a v4l2 LD_PRELOAD library to emulate v4l2 system calls on top of PipeWire. This is tested with firefox and GStreamer and is known to not work with Chrome. * Bluetooth - AAC compatibility improvements. - Disable hardware volume for "Tribit MAXSound Plus" and "SoundCore mini". - Add quirk to disable faststream. Disable faststream on "FiiO BTR3". - Add a dummy AVRCP player to improve compatibility with some devices. - Remove patch: * 0001-fix-compilation-on-ARM.patch - Add patch from upstream: * 0001-cpu-fix-compilation-on-some-architectures.patch ==== pipewire-media-session ==== Version update (0.3.38 -> 0.4.0) - Drop gcc-c++ and cmake BuildRequires, not needed. - Add generic c_compiler BuildRequires. - Minor cleanup of spec-file. - Update to 0.4.0, the first tagged version of pipewire-media-session - Initial version of pipewire-media-session 0.3.38+git20211019.da0b9c2ae ==== python-SQLAlchemy ==== Version update (1.4.22 -> 1.4.25) - update to version 1.4.25: * Fixed regression due to :ticket:`7024` where the reorganization of the "platform machine" names used by the ``greenlet`` dependency mis-spelled "aarch64" and additionally omitted uppercase "AMD64" as is needed for Windows machines. * Fixed a bug in :meth:`_asyncio.AsyncSession.execute` and :meth:`_asyncio.AsyncSession.stream` that required ``execution_options`` to be an instance of ``immutabledict`` when defined. It now correctly accepts any mapping. * Improve the interface used by adapted drivers, like the asyncio ones, to access the actual connection object returned by the driver. * Implemented missing methods in :class:`_functions.FunctionElement` which, while unused, would lead pylint to report them as unimplemented abstract methods. * Fixed an issue where :meth:`_reflection.has_table` returned ``True`` for local temporary tables that actually belonged to a different SQL Server session (connection). An extra check is now performed to ensure that the temp table detected is in fact owned by the current session. * Fixed issue where the ability of the :meth:`_events.ConnectionEvents.before_execute` method to alter the SQL statement object passed, returning the new object to be invoked, was inadvertently removed. This behavior has been restored. * Ensure that ``str()`` is called on the an :paramref:`_url.URL.create.password` argument, allowing usage of objects that implement the ``__str__()`` method as password attributes. Also clarified that one such object is not appropriate to dynamically change the password for each database connection; the approaches at :ref:`engines_dynamic_tokens` should be used instead. * Fixed ORM issue where column expressions passed to ``query()`` or ORM-enabled ``select()`` would be deduplicated on the identity of the object, such as a phrase like ``select(A.id, null(), null())`` would produce only one "NULL" expression, which previously was not the case in 1.3. However, the change also allows for ORM expressions to render as given as well, such as ``select(A.data, A.data)`` will produce a result row with two columns. * Fixed issue where mypy plugin would crash when interpreting a ``query_expression()`` construct. * Added new methods :meth:`_orm.Session.scalars`, * Added loader options to :meth:`_orm.Session.merge` and :meth:`_asyncio.AsyncSession.merge` via a new :paramref:`_orm.Session.merge.options` parameter, which will apply the given loader options to the ``get()`` used internally by merge, allowing eager loading of relationships etc. to be applied when the merge process loads a new object. Pull request courtesy Daniel Stone. * Added initial support for the ``asyncmy`` asyncio database driver for MySQL and MariaDB. This driver is very new, however appears to be the only current alternative to the ``aiomysql`` driver which currently appears to be unmaintained and is not working with current Python versions. Much thanks to long2ice for the pull request for this dialect. * Fixed a two issues where combinations of ``select()`` and ``join()`` when adapted to form a copy of the element would not completely copy the state of all column objects associated with subqueries. A key problem this caused is that usage of the :meth:`_sql.ClauseElement.params` method (which should probably be moved into a legacy category as it is inefficient and error prone) would leave copies of the old :class:`_sql.BindParameter` objects around, leading to issues in correctly setting the parameters at execution time. ==== selinux-policy ==== Subpackages: selinux-policy-targeted - fix_wine.patch: give Wine .dll same context as .so (bsc#1191976) ==== sshfs ==== Version update (3.7.1 -> 3.7.2) - sshfs 3.7.2: * Add a secondary check so if a mkdir request fails with EPERM an access request will be tried - returning EEXIST if the access was successful ==== webkit2gtk3 ==== Subpackages: WebKit2GTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Add webkit2gtk3-link-fix.patch: taken from upstream, fixes the build on SLE-15-SP4. - Use gcc10 package on SLE <= 15-SP4. Gcc 7 is currently the default there. - Update gcc-c++ version requirement to match the cmake check. ==== webkit2gtk3-soup2 ==== Subpackages: WebKit2GTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles - Add webkit2gtk3-link-fix.patch: taken from upstream, fixes the build on SLE-15-SP4. - Use gcc10 package on SLE <= 15-SP4. Gcc 7 is currently the default there. - Update gcc-c++ version requirement to match the cmake check. ==== yast2-trans ==== Version update (84.87.20210929.6d3a97ea50 -> 84.87.20211022.37a68b8306) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20211022.37a68b8306: * Translated using Weblate (Turkish) * New POT for text domain 'timezone_db'. * New POT for text domain 'country'. * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * New POT for text domain 'users'. * New POT for text domain 'network'. * New POT for text domain 'registration'. * Translated using Weblate (Hindi) * New POT for text domain 'installation'.

1 0